Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b091862-a183-4916-a397-f2d62c76d748.roa
File:                     0b091862-a183-4916-a397-f2d62c76d748.roa (raw, json)
Hash identifier:          HEtOLKEHe6zCpF2Tahbibsh1OuJAoIBncu66fMcSeyc=
Subject key identifier:   00:42:A1:6F:01:BA:A5:F7:51:3E:6B:26:EF:28:56:20:2F:08:F3:E2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7322434A7CE5CF9FA1AC14718545A5E6DB7FD4D9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b091862-a183-4916-a397-f2d62c76d748.roa
Signing time:             Wed 22 Jul 2026 00:32:03 +0000
ROA not before:           Wed 22 Jul 2026 00:32:03 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:20a4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:22:43:4a:7c:e5:cf:9f:a1:ac:14:71:85:45:a5:e6:db:7f:d4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:32:03 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=1f0abcf053d46fdcbb6ffd0e2afa9011dea359a557ab9b951e91e0bdbb92d272, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:93:a5:64:8c:10:30:eb:19:fd:1e:8d:1a:
                    b5:9f:3d:fd:bf:bb:ed:4c:fc:69:57:23:8f:3e:52:
                    63:6b:99:56:99:9b:7f:da:60:c3:82:17:62:51:02:
                    9f:72:d8:8d:ab:88:52:70:3f:9b:85:95:ca:b1:40:
                    bf:3f:fb:fa:d5:3b:27:85:b2:60:05:f9:a3:22:91:
                    b2:97:e7:3b:c8:b5:b0:ee:9e:0e:6a:88:8e:e4:f6:
                    70:62:d7:c2:3d:71:47:c2:e3:54:0e:49:ee:ef:fb:
                    ff:67:eb:1c:5c:43:b6:f1:2e:4c:f1:c6:4e:5c:22:
                    db:af:14:dc:90:0e:c1:be:54:ed:f1:ab:4e:54:5d:
                    b9:d0:a0:39:74:1b:00:67:06:0b:7e:37:5a:83:4e:
                    55:ee:02:88:b0:df:02:12:d4:c2:44:32:6c:5c:32:
                    e8:a7:de:5e:16:d7:2c:45:e0:b0:af:ea:23:67:f4:
                    a4:a5:02:de:07:9e:3d:59:cb:c7:78:2c:fa:ce:15:
                    b2:7c:67:0a:a6:7e:05:e7:90:21:28:70:93:7d:0c:
                    bb:be:e5:28:81:70:a7:54:a2:e2:07:a6:d7:11:0a:
                    cc:3a:65:d4:65:9d:cd:f9:c7:8b:e1:93:73:49:df:
                    93:7a:fd:fb:3d:23:76:7f:cb:f0:f9:62:e5:59:4f:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:A1:6F:01:BA:A5:F7:51:3E:6B:26:EF:28:56:20:2F:08:F3:E2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0b091862-a183-4916-a397-f2d62c76d748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:20a4::/46

    Signature Algorithm: sha256WithRSAEncryption
         c2:ea:dd:8d:63:00:de:78:4d:68:01:e8:d7:5f:62:61:48:3d:
         24:05:a5:74:b5:77:65:21:1e:2d:07:cd:fb:a6:a2:c6:87:24:
         b6:5b:ab:98:e1:0d:49:58:d1:62:da:ad:ec:72:da:39:b8:6f:
         f0:26:be:64:e3:51:c9:8f:5a:a0:4c:c9:29:ca:9b:16:34:62:
         a4:13:bd:90:fc:cb:62:54:11:c1:34:9e:d6:89:43:a2:3c:04:
         89:38:f8:2c:a0:d3:ad:93:98:0e:74:89:ac:86:57:d9:f7:58:
         f5:3c:38:80:95:ae:99:d7:c6:08:71:7e:f5:e2:28:69:70:bf:
         1b:34:2b:d7:e3:07:17:df:9c:c1:4e:62:9b:b7:a0:30:99:93:
         42:8c:5d:54:d2:63:3f:1b:48:19:31:d8:24:5b:6a:3d:f7:c9:
         3a:7c:a6:46:f6:40:1e:ed:8c:e7:58:b9:58:5e:eb:f2:23:f3:
         1d:cd:3e:14:b4:f1:f6:86:4f:92:c4:f2:dc:6e:c5:65:df:62:
         96:e1:09:7f:3e:9a:a8:cf:d4:04:0b:5c:6d:54:0c:db:45:c1:
         e5:18:73:dd:8b:96:96:c4:f8:f4:6c:47:41:aa:55:81:aa:33:
         07:93:f2:dc:7f:a1:c7:ae:01:e0:52:4f:37:78:67:08:5e:e3:
         94:30:ee:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:10 2026 by rpki-client